Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
File: BOZbg9ITFfi6dXjoi984Eyld3go.mft (raw, json)
Hash identifier: CoKHD9YEnzhataw461oVfJOwMO7qI+cUQzCqUm1A+w8=
Subject key identifier: DD:77:F5:0F:32:D8:A0:3F:D2:25:05:49:35:82:52:A6:42:22:6D:C8
Authority key identifier: 04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
Certificate issuer: /CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Certificate serial: 019F9090F025D393FEFA1D65FD3EC99B49D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
Manifest number: 10E3
Signing time: Thu 23 Jul 2026 20:00:45 +0000
Manifest this update: Thu 23 Jul 2026 20:00:45 +0000
Manifest next update: Fri 24 Jul 2026 20:00:45 +0000
Files and hashes: 1: BOZbg9ITFfi6dXjoi984Eyld3go.crl (hash: s8/y5ySW82LbNqHElpdEd/3OIjK2NN+6eLcp4v4cOzY=)
2: GjbkJ49m1ylK_4cEmIWXPszPEDM.roa (hash: gxfEhCbhLA8o8by+I0tdbjJ2UvnCGKEhH4gj7vfErb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:f0:25:d3:93:fe:fa:1d:65:fd:3e:c9:9b:49:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04e65b83d21315f8ba7578e88bdf3813295dde0a
Validity
Not Before: Jul 23 20:00:45 2026 GMT
Not After : Jul 24 20:00:45 2026 GMT
Subject: CN=dd77f50f32d8a03fd2250549358252a642226dc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c9:d0:54:6a:3b:29:0f:11:7f:44:5f:e4:62:
1f:d7:31:dd:ab:a7:eb:17:9f:a2:33:2d:d6:44:80:
3e:fe:a5:e6:32:0f:56:0b:b3:89:81:48:59:b4:22:
8a:65:ad:d4:98:29:3a:a9:5b:43:fe:22:dd:4c:47:
cc:1d:10:64:61:64:e3:73:09:0d:ad:dc:47:82:2c:
c7:d9:2d:ec:12:28:34:7c:9e:a8:ed:00:51:48:85:
a6:cd:47:6b:c3:0f:d1:58:20:9c:9b:80:37:1a:c6:
61:88:0b:e5:3c:f8:20:3a:40:78:1c:e3:ee:58:78:
8f:a8:e2:01:c2:d4:0a:bb:a6:aa:6a:c4:83:3b:22:
85:25:b8:ef:06:fa:a5:33:5c:ec:fa:b9:35:6c:da:
c0:11:92:0b:6a:dd:97:20:e0:47:93:49:e0:98:f9:
57:09:2a:df:79:66:01:a9:26:57:50:39:99:a5:f8:
a2:db:54:f8:7d:c7:15:54:2a:63:19:15:b6:98:b1:
8d:48:c2:99:05:9a:d5:e5:b1:43:0d:4a:39:09:55:
ec:b0:3c:8a:6f:51:69:87:fa:a5:33:2f:37:8e:c9:
0f:b9:c9:c5:ab:67:e8:0c:e3:fb:e3:ba:26:c3:d1:
f6:8b:d9:b1:48:6a:67:74:3d:76:8b:b2:7b:76:14:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:77:F5:0F:32:D8:A0:3F:D2:25:05:49:35:82:52:A6:42:22:6D:C8
X509v3 Authority Key Identifier:
keyid:04:E6:5B:83:D2:13:15:F8:BA:75:78:E8:8B:DF:38:13:29:5D:DE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BOZbg9ITFfi6dXjoi984Eyld3go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/cddb61-12a0-46bd-9fb7-3e781dc1e7e9/1/BOZbg9ITFfi6dXjoi984Eyld3go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8f:4e:7b:be:a8:86:ef:4d:c7:ef:53:3c:0a:ad:5b:b3:1c:
7b:8e:28:3f:b6:56:e4:54:03:d0:b6:11:94:4c:75:eb:0e:6a:
09:e4:28:e8:9b:1e:0b:ec:2b:89:58:52:f4:b2:c9:fe:be:1a:
de:4f:1b:79:e9:0a:62:c0:6e:0d:eb:e6:8d:26:d8:e2:b1:4e:
ea:84:0a:c9:27:1a:75:ba:95:e0:29:1e:c7:14:1a:7c:44:ed:
a1:ec:2b:41:56:c4:47:ca:99:49:6e:c8:cc:76:1c:97:6d:8f:
19:56:47:82:e9:7e:bc:3c:d5:e7:3c:8d:56:e6:0d:35:60:de:
21:db:8d:10:63:00:a6:6a:b1:0d:f4:cb:d0:56:a6:e5:d6:a9:
f3:f3:1b:fa:59:2c:60:6c:e8:26:8d:24:a4:22:15:4d:75:c0:
55:41:11:20:82:06:7c:17:00:32:6f:da:41:e5:5f:5c:0d:d1:
c7:93:30:67:66:c2:0c:7f:6f:de:df:b0:31:09:5d:02:19:28:
bb:9c:b4:ff:ad:43:bc:ea:99:8c:a3:d1:0b:00:a6:f3:28:06:
98:5b:43:71:19:d6:3c:0a:d5:66:8f:9b:9a:63:42:8e:fb:38:
ad:8c:8d:a7:e5:43:91:27:fd:cd:a6:db:96:9c:87:df:e2:1d:
a4:b6:22:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:14 2026 by rpki-client